Dr. Web auto-updated, now constant Apache CPU usage alerts

[xmuskrat]

DrWeb had an automatic update 2 days ago, and since then I've been getting constant Apache CPU usage alerts. Immediately after this email upgrade notice came, the CPU alerts have come non-stop.

/etc/cron.daily/drweb-update:

Dr.Web (R) update details:
Update server: http://update.us1.drweb.com/unix/500
Update has begun at Mon Nov 15 04:27:23 2010
Update has finished at Mon Nov 15 04:27:25 2010

Following files has been updated:
/var/drweb/bases/drw50051.vdb
/var/drweb/bases/drwdaily.vdb
/var/drweb/bases/drwtoday.vdb
/var/drweb/bases/dwntoday.vdb
/var/drweb/bases/dwrtoday.vdb
/var/drweb/updates/timestamp

And now:

Server: activestudios-webhosting.com.

Server health parameter "Services > Apache CPU usage" changed its status from "green" to "red".

top - 17:00:41 up 55 min, 0 users, load average: 0.29, 0.48, 0.32
Tasks: 42 total, 2 running, 40 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.9%us, 0.5%sy, 0.0%ni, 98.5%id, 0.1%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 2097152k total, 667060k used, 1430092k free, 0k buffers
Swap: 0k total, 0k used, 0k free, 0k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
9671 apache 15 0 60624 33m 5672 S 25.8 1.6 0:58.58 httpd
9752 apache 15 0 62268 34m 5644 R 17.9 1.7 0:55.55 httpd
1 root 15 0 2072 644 556 S 0.0 0.0 0:02.33 init
4060 root 18 0 44172 20m 8820 S 0.0 1.0 0:00.26 httpd
4066 apache 15 0 31836 9600 596 S 0.0 0.5 0:00.00 httpd
9577 apache 15 0 60312 32m 4640 S 0.0 1.6 0:59.93 httpd
12265 root 15 0 2196 912 712 R 0.0 0.0 0:00.00 top
23760 root 17 -4 2156 552 344 S 0.0 0.0 0:00.00 udevd
24232 root 15 0 13280 732 528 S 0.0 0.0 0:00.41 rsyslogd
24236 root 24 0 1676 396 332 S 0.0 0.0 0:00.00 rklogd
24265 sw-cp-se 15 0 6340 2868 1416 S 0.0 0.1 0:00.38 sw-cp-serverd
24275 root 15 0 7072 1064 668 S 0.0 0.1 0:00.95 sshd
24285 root 15 0 2728 892 724 S 0.0 0.0 0:00.01 xinetd
24322 root 21 0 2456 1136 972 S 0.0 0.1 0:00.00 mysqld_safe
24375 mysql 19 0 188m 29m 5308 S 0.0 1.5 0:03.76 mysqld
24412 root 18 0 2840 564 460 S 0.0 0.0 0:00.00 couriertcpd
24414 root 18 0 1664 484 412 S 0.0 0.0 0:00.00 courierlogger
24422 root 15 0 2840 564 460 S 0.0 0.0 0:00.00 couriertcpd
24424 root 18 0 1664 484 412 S 0.0 0.0 0:00.00 courierlogger
24430 root 16 0 2840 556 460 S 0.0 0.0 0:00.00 couriertcpd
24432 root 18 0 1664 480 412 S 0.0 0.0 0:00.00 courierlogger
24440 root 18 0 2840 560 460 S 0.0 0.0 0:00.00 couriertcpd
24442 root 18 0 1664 480 412 S 0.0 0.0 0:00.00 courierlogger
24453 qmails 16 0 1716 408 324 S 0.0 0.0 0:00.00 qmail-send
24455 qmaill 18 0 1672 476 404 S 0.0 0.0 0:00.00 splogger
24456 root 18 0 1700 376 288 S 0.0 0.0 0:00.00 qmail-lspawn
24457 qmailr 19 0 1696 360 268 S 0.0 0.0 0:00.00 qmail-rspawn
24458 qmailq 18 0 1668 348 284 S 0.0 0.0 0:00.00 qmail-clean
24537 named 18 0 109m 4448 1956 S 0.0 0.2 0:00.16 named
24572 root 15 0 32284 29m 2348 S 0.0 1.4 0:00.81 spamd
25605 popuser 15 0 32420 28m 1256 S 0.0 1.4 0:00.36 spamd
26015 drweb 15 0 88176 81m 556 S 0.0 4.0 0:00.07 drwebd.real
26025 root 18 0 44356 16m 4532 S 0.0 0.8 0:00.56 sw-engine
26047 root 15 0 71700 2212 864 S 0.0 0.1 0:11.25 sw-collectd
26063 root 18 0 3252 1116 568 S 0.0 0.1 0:00.00 crond
26073 root 18 0 5588 708 428 S 0.0 0.0 0:00.00 saslauthd
26074 root 19 0 5588 432 152 S 0.0 0.0 0:00.00 saslauthd
26080 root 15 0 35516 9844 7040 S 0.0 0.5 0:00.07 sw-engine
26081 root 15 0 15956 2652 2164 S 0.0 0.1 0:00.27 monit
26110 apache 15 0 62716 34m 4584 S 0.0 1.7 0:15.09 httpd
26352 apache 15 0 62684 34m 4552 S 0.0 1.7 0:14.33 httpd
31774 neoluma 17 0 7620 4004 2276 S 0.0 0.2 0:00.01 test.fcgi

Earlier that night I also got an email with this:

PHP Fatal error: Class 'OptionalServices_ServicesConfiguration' not found in /usr/local/psa/admin/plib/common_func.php3 on line 2948

Any ideas?

 

[IgorG]

Regarding error "PHP Fatal error: Class 'OptionalServices_ServicesConfiguration' not found in /usr/local/psa/admin/plib/common_func.php3 on line 2948" the fixed utility 'send-report' for PP 10.0.0 and 10.0.1 is in the attached zip.
To install the fix copy 'send-report' utility to /usr/local/psa/libexec/modules/watchdog/cp/
Don't forget to backup previous version of this file and make it executable:

# chmod ug+x /usr/local/psa/libexec/modules/watchdog/cp/send-report

Please try it and update thread if problem still persist.

 

[Shawn M]

Regarding error "PHP Fatal error: Class 'OptionalServices_ServicesConfiguration' not found in /usr/local/psa/admin/plib/common_func.php3 on line 2948" the fixed utility 'send-report' for PP 10.0.0 and 10.0.1 is in the attached zip.
To install the fix copy 'send-report' utility to /usr/local/psa/libexec/modules/watchdog/cp/
Don't forget to backup previous version of this file and make it executable:



Please try it and update thread if problem still persist.

I did as followed and got this error now: /bin/sh: /usr/local/psa/libexec/modules/watchdog/cp/send-report: /opt/psa/bin/sw-engine-pleskrun: bad interpreter: No such file or directory

 

[MassimoP]

I have the same error (bash: ./send-report: /opt/psa/bin/sw-engine-pleskrun: bad interpreter: No such file or directory) on my server:
CPU AuthenticAMD, Quad-Core AMD Opteron(tm) Processor 2372 HE
Version Parallels Plesk Panel v10.0.1_build109101029.19 os_SuSE 11.1
OS Linux 2.6.27.54-0.1-pae

 

[IgorG]

Try to do it according to http://kb.odin.com/en/9329

 

[MassimoP]

same error (bash: ./send-report: /opt/psa/bin/sw-engine-pleskrun: bad interpreter: No such file or directory), the problem is not the procedure but the file

 

[OtterF]

Do not work:

/usr/local/psa/libexec/modules/watchdog/cp/send-report weekly

-bash: /usr/local/psa/libexec/modules/watchdog/cp/send-report: /opt/psa/bin/sw-engine-pleskrun: bad interpreter: Datei oder Verzeichnis nicht gefunden

 

[IvanV]

Change first line from:
#!/opt/psa/bin/sw-engine-pleskrun
to:
#!/usr/local/psa/bin/sw-engine-pleskrun

 

[wedeen]

You have to change the owner and group of the file send-report

chown rootsaadm send-report

Then it should work.

 

[OtterF]

Now everyting is running. Thanks

 

[xmuskrat]

On the original issue about CPU usage, I got my CPU to go back down by disabling FastCGI support on my domains.

 

[MassimoP]

Thanks, now it works... for a strange error my VIM did not show the first line of that file and each time I open it, VIM shows one line less

 

[Shawn M]

Change first line from:
#!/opt/psa/bin/sw-engine-pleskrun
to:
#!/usr/local/psa/bin/sw-engine-pleskrun

Where do I make this change?

 

[IgorG]

Where do I make this change?

In /usr/local/psa/libexec/modules/watchdog/cp/send-report file.

 

[Shawn M]

I did vi /usr/local/psa/libexec/modules/watchdog/cp/send-report

and got this:

<?php
die("The file {$_SERVER['SCRIPT_FILENAME']} is part of Plesk 9 distribution. It cannot be run outside of Plesk 9 environment.\n");
__sw_loader_pragma__('P');
?>
_$7>()Ãh°¯ä>]øNl^Yf´Ã7YdÃ<96><80><99>Ã*<85>à =_^LcÃ
p<87><92>q7E<8a>®<81>Ãê<8d>ý<92>P<90>&ÃÃò13{ò^L½<8c>E»G<87>i<8d>ú<89>F<99>^M9rµà >x3m^L«^_¨^Tü<9c>)H^G<9a>XRÃ<90>¡ÃäìoG©90¦6Ã
P<8f>Ã^W9hà <85>^HVÃhBü·X¿§}^_7©<89>dk?H*õ^B^[[
^?^Y,<99>^A^KÃ!¹û<97>|´ÃÃì<8b>]^@%<83>ôE[·)]¡5X!{<8c>re?¤<8a><8e>^C<8f>^3><99>qûÃ,^]^T<80>ù®õ|G/<9d>éÃ*'^^<8f>$&u^H¸¼ÃpµfÃ%_´Â*AL<9a>¼ý®ÿ§^Q4ãÂ*_<85>^F<9b><80><83>)^SN^º<ae¹õ9vóZ'<8b>Ã9b>Ã<94>^N&-^BÃÃç\<94>^@Ã^E<ADÃT^Kx ªÃ;Ã<96>ú«SiæÃI<86>ëÃ5à _iÃMm<9d>^CV)Ã&^D·^M6ÃJ¡æ^FX^W¼³ÃáTÂ* <8b>Y<91>-%f32è,%q<96>$Ã^Mdû^N2ºî;¨I-^C<85>öïé4^D<91>^_KÃ
Yáãç<83>"^WFÃ<91>Q9hû^VëAÃ<97>Ã#<88>a¤^W^QR^H^HW¤8@<91>ÃÃø<8c>^X^HÃÃ*EOÂ9c>HÃMð<83>^FÃç¹5<99>jP·<98>^ªM<îÃSdz'Ã

 

[IgorG]

I see first line there as

#!/opt/psa/bin/sw-engine-pleskrun

 

[Shawn M]

I see first line there as

#!/opt/psa/bin/sw-engine-pleskrun

Where do you see this? I don't

 

[IgorG]

At the beginning of /usr/local/psa/libexec/modules/watchdog/cp/send-report file

 

[Shawn M]

What I'm saying is I don't see
#!/opt/psa/bin/sw-engine-pleskrun
or
#!/usr/local/psa/bin/sw-engine-pleskrun

at the beginning of the /usr/local/psa/libexec/modules/watchdog/cp/send-report file.

 

[IgorG]

Seems your file is corrupted. Try to reinstall psa-watchdog package.